Skip to main content

Intranet vs Internet, firewall, content filtering

Short answer

Intranet offers secure, private, fast internal sharing with low cost but is limited to the organization and needs maintenance. A firewall filters traffic between intranet and internet based on rules (packet, stateful, proxy). Content filtering blocks unwanted material by URL, keyword, or file-type to enforce policy and block malware.

Compare intranet and internet in terms of benefits and drawbacks. Discuss in detail about firewall and content filtering.

Intranet vs Internet: benefits and drawbacks

IntranetInternet
BenefitsSecure, private; fast LAN speed; internal sharing of files, policies, applications; central control and low cost for communication; easy to customiseGlobal reach; huge information; e-commerce, e-mail, social media; low-cost communication; open services
DrawbacksLimited to the organisation; needs setup, maintenance and skilled staff; needs a gateway for Internet access; can be misused by insidersSecurity risks (malware, hacking, phishing); no central control; unreliable content; privacy loss; depends on ISP

Firewall

A firewall is hardware or software placed between a trusted network (intranet) and an untrusted network (Internet) that allows or blocks traffic according to security rules.

 Internet --- [Firewall] --- Intranet (LAN)
                  |
                 DMZ: web, mail, DNS servers

Types

  1. Packet-filtering firewall: checks source/destination IP, port and protocol against an ACL. Fast but does not track connections.
  2. Stateful inspection firewall: keeps a table of active connections and allows only valid replies.
  3. Application-level gateway / proxy firewall: acts as an intermediary for a particular application (HTTP, FTP), hides internal hosts and inspects the content.
  4. Next-generation firewall (NGFW): adds deep packet inspection, intrusion prevention, application control and user identity.

Functions: block unauthorised access, hide internal addresses (NAT), log traffic, create a DMZ for public servers, support VPN.

Example rule: allow TCP 80/443 from the LAN to any; allow TCP 25 only to the mail server; deny all other inbound traffic.

Limitations: cannot stop insider attacks, malware carried on USB or inside allowed traffic, or attacks that bypass the firewall.

Content filtering

Content filtering screens web pages, e-mail and downloads and blocks material that breaks the organisation's policy.

Methods:

  • URL/category filtering: block websites by address list or category (adult, gambling, social media).
  • Keyword filtering: block pages or mail with certain words.
  • File-type/MIME filtering: block executables or large media downloads.
  • Antivirus and spam filtering: scan attachments and mail.
  • DNS filtering: refuse to resolve harmful domains.
  • Implemented in a proxy server (e.g. Squid with ACLs), in firewall/UTM devices or in cloud security services.

Purposes: protect against malware, enforce an acceptable-use policy, save bandwidth, increase productivity, and meet legal requirements. Limitations are over-blocking, evasion through VPNs and difficulty with encrypted HTTPS traffic.

✓ Answer checked by Claude Opus 5.5 (high effort)

Related questions

All Internet and Intranet chapter 1 questions →